Daily Writeups
@Daily_Writeups
3.88K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.88K subscribers
Daily Writeups
⤷ Title: I Wanted to Learn Cybersecurity Without Paying $1
════════════════════════
𐀪 Author: MOHAMMAD SHAIKH
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:52:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #free #hacking
Medium
I Wanted to Learn Cybersecurity Without Paying $1
Here’s What I Found
13 views
Daily Writeups
⤷ Title: Analyse Offensive du “Country Code” Wi-Fi
════════════════════════
𐀪 Author: ATTE-THM
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:02:18 GMT
════════════════════════
⌗ Tags: #linux #security #cybersecurity #hacking #software_development
Medium
Analyse Offensive du “Country Code” Wi-Fi
Quand la réglementation devient une surface d’attaque
13 views
Daily Writeups
⤷ Title: From SOC Analyst to GRC Engineering: Building an Evidence Vault You Can’t Quietly Change Part 13
════════════════════════
𐀪 Author: David ONeal
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:12:33 GMT
════════════════════════
⌗ Tags: #compliance #information_security #infosec #information_technology #cybersecurity
Medium
From SOC Analyst to GRC Engineering: Building an Evidence Vault You Can’t Quietly Change Part 13
When I started working through GRC engineering, I thought a lot about how to enforce security controls.
13 views
Daily Writeups
⤷ Title: AD Lab Part 2: Building and Joining CLIENTS to the Domain
════════════════════════
𐀪 Author: Cyberknight
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 21:16:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #projects #penetration_testing #homelab
Medium
AD Lab Part 2: Building and Joining CLIENTS to the Domain
This write-up covers building CLIENT01 from scratch, networking it correctly using the same isolated dual-NIC pattern established for DC01…
16 views
Daily Writeups
⤷ Title: TryHackMe: Agent Sudo Çözümü | User-Agent Fuzzing, Steganografi ve Sudo Bypass (CVE-2019–14287)
════════════════════════
𐀪 Author: Sedat Kara
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:36:33 GMT
════════════════════════
⌗ Tags: #ctf_writeup #tryhackme #etik_hacker #cybersecurity
Medium
TryHackMe: Agent Sudo Çözümü | User-Agent Fuzzing, Steganografi ve Sudo Bypass (CVE-2019–14287)
Selamlar! Bu yazıda TryHackMe’de yer alan, gizli ajan temalı ve adli bilişimden yetki yükseltmeye kadar pek çok farklı tekniği barındıran…
18 views
Daily Writeups
⤷ Title: HackSmarter Casino 1 of 2…related to the WebApp Course
════════════════════════
𐀪 Author: Cpt Ron
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 21:22:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #pentesting #teaching #learning
Medium
HackSmarter Casino 1 of 2…related to the WebApp Course
Hello boys and girls, I hope you had a great week of hacking all the things. In today’s episode we will be deviating from the last 2 posts…
16 views
Daily Writeups
⤷ Title: Windows VAPT: From Jenkins Exploitation to SYSTEM Privilege
════════════════════════
𐀪 Author: Najeebparkar
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 20:10:08 GMT
════════════════════════
⌗ Tags: #ethical_hacking #vapt #malware #cybersecurity #pentesting
Medium
Windows VAPT: From Jenkins Exploitation to SYSTEM Privilege
Introduction
31 views
Daily Writeups
⤷ Title: The Recon Habit That Separates Paid Hackers From Tool Users
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:45:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #medium #writing #hacking
Medium
The Recon Habit That Separates Paid Hackers From Tool Users
Recon From Zero: The 7 Part Hunter’s Map. From your first subdomain to your first bounty, one step at a time
19 views
Daily Writeups
⤷ Title: Fixing Frida LIBUSB_TRANSFER_STALL by Switching from USB to Wi-Fi
════════════════════════
𐀪 Author: Sid Joshi
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:44:13 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #ios_penetration_testing #bug_bounty #bug_bounty_tips #android_pentesting
16 views
Daily Writeups
⤷ Title: When the Wall Has a Door: A Bug Hunter’s Guide to CSP Bypass
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_bounty_writeup #bug_bounty_tips #hacking
Medium
When the Wall Has a Door: A Bug Hunter’s Guide to CSP Bypass
Here’s a moment every hunter hits eventually: you’ve found the injection, your payload lands in the page, and then… nothing. No alert box…
15 views
Daily Writeups
⤷ Title: Intigriti September 2026 CTF Write-Up: Exploiting UNION-Based SQL Injection in Critter Gallery
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:31:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #ctf_writeup #sql_injection #intigriti
Medium
Intigriti September 2026 CTF Write-Up: Exploiting UNION-Based SQL Injection in Critter Gallery
Challenge: Critter Gallery
Platform: Intigriti
Category: Web Security / SQL Injection
Vulnerability: UNION-Based SQL Injection
Difficulty…
17 views
Daily Writeups
⤷ Title: I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:08 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #hacking #artificial_intelligence #web_security
Medium
I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
Sometimes you don’t need a complicated exploit to find something interesting.
21 views
Daily Writeups
⤷ Title: Authlib Signature Bypass Vulnerability Exposes Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:59:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Authlib #CVE_2026_27962 #CVE_2026_28802 #CVE_2026_96760 #cybersecurity
Daily CyberSecurity
Authlib Signature Bypass Vulnerability Exposes Apps
TL;DR CERT/CC released an advisory warning of an Authlib signature bypass vulnerability tracked as CVE-2026-96760. This flaw allows attackers to forge JSON Web Signatures (JWS) and inject maliciou…
18 views
Daily Writeups
⤷ Title: Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:50:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8
TL;DR On September 29, 2026, WatchGuard disclosed three severe WatchGuard AP vulnerabilities. These flaws allow attackers to bypass authentication and execute arbitrary operating system commands. …
14 views
Daily Writeups
⤷ Title: Portal for ArcGIS Vulnerabilities Fixed in September Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:42:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcGIS #CVE_2026_10759 #CVE_2026_69226 #CVE_2026_69227 #cybersecurity #Esri
Daily CyberSecurity
Portal for ArcGIS Vulnerabilities Fixed in September Update
TL;DR On September 24, 2026, Esri released Security Update 4 to patch three Portal for ArcGIS vulnerabilities. The update resolves a critical missing authentication flaw alongside two medium-sever…
7 views
Daily Writeups
⤷ Title: Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:05:24 +0000
════════════════════════
⌗ Tags: #Announcement #CISA KEV #CVE Alerts #CVE_Watch #EPSS #Exploit Intelligence #Free Trial #GitHub Issues #Microsoft Teams #patch management #Reserved CVE #Slack Integration #threat intelligence #vulnerability management
Daily CyberSecurity
Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
Daily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that …
10 views
Daily Writeups
⤷ Title: Exploited Apple Zero-Day Vulnerability Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:21:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Arbitrary Code Execution #CVE_2026_86950 #cybersecurity #ios #macOS #zero_day
Daily CyberSecurity
Exploited Apple Zero-Day Vulnerability Patched
TL;DR On September 29, 2026, Apple issued emergency updates to remediate an actively exploited Apple zero-day vulnerability. The critical flaw allows attackers to execute arbitrary code by trickin…
9 views
Daily Writeups
⤷ Title: PostgreSQL RCE Vulnerability Details and PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:19:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_15742 #cybersecurity #database security #fuzzystrmatch #PostgreSQL #Remote Code Execution
Daily CyberSecurity
PostgreSQL RCE Vulnerability Details and PoC Disclosed
TL;DR PostgreSQL developers patched a critical integer wraparound flaw in the fuzzystrmatch module. This PostgreSQL RCE vulnerability permits low-privileged database users to execute arbitrary com…
11 views
Daily Writeups
⤷ Title: Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI…
════════════════════════
𐀪 Author: Mostafa Ayed
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:08:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #infosec
Medium
Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI Support Chatbot
Summary
7 views
Daily Writeups
⤷ Title: How I Solved Intigriti’s September 2026 Challenge
════════════════════════
𐀪 Author: Ronaldo Shrestha
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #intigriti #ctf_writeup #ctf #bug_bounty
Medium
How I Solved Intigriti’s September 2026 Challenge
Critter Gallery — Boolean-Based Blind SQL Injection
14 views
Daily Writeups
⤷ Title: First Principle Insight #7
════════════════════════
𐀪 Author: Kevin Hagan
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:19:59 GMT
════════════════════════
⌗ Tags: #crime #hacker #cybersecurity #hacking #stock_price
Medium
First Principle Insight #7
Most hackers start out trying to do the right thing by going to bug bounty sites and filling out a report on finds they find. But the…
17 views